CLAIMS 

1. A method comprising: 

presenting a user with a pkirahty of modes of operation, wherein the 
plurality of modes of operation define different trust options for handling sensitive 
data associated with the user; 

receiving a selection from the user, wherein the selection is one of the 
plurality of modes of operation; and 

handling sensitive data associated with the user in accordance with the 
selected mode of operation. 

2. A method as recited in claim 1 wherein the plurality of modes include 
a low trust option for handling sensitive data associated with the user, the low trust 
option configured to retrieve sensitive data from the user each time the user 
requests a service requiring the sensitive data. 

3. A method as recited in claim 2 wherein the low trust option does not 
persistently store sensitive data after the requested service requiring the sensitive 
data has been completed. 



4. A method as recited in claim 1 wherein the plurality of modes include 
a high trust option for handling sensitive data associated with the user, the high 
trust option configured to retrieve sensitive data from the user and store the 
sensitive data in an encrypted format for future use. 
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5. A method as recited in claim 1 wherein the plurahty of modes include 
a high trust option for handling sensitive data associated with the user^ the high 
trust option configured to retrieve sensitive data from the user, encode the 
sensitive data using a two-way encryption technique, and store the encrypted 
sensitive data. 

6. A method as recited in claim 1 wherein the plurality of modes include 
a moderate trust option for handling sensitive data associated with the user, the 
moderate trust option configured to retrieve sensitive data from the user and store 
the sensitive data in an encrypted format using a password known only to the user. 

7. A method as recited in claim 1 wherein the plurality of modes include 
a moderate trust option for handling sensitive data associated with the user, the 
moderate trust option configured to retrieve sensitive data jfrom the user, encode 
the sensitive data using a one-way encryption technique, and store the encrypted 
sensitive data. 

8. A method as recited in claim 1 further comprising assigning a default 
mode of operation if the user does not select a valid mode of operation. 

9. A method as recited in claim 1 further comprising associating a user 
account with the selected mode of operation. 
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10. A method comprising: 

presenting a user with a low trust mode of operation, wherein the low trust 
mode of operation retrieves sensitive data from the user each time the user 
requests a service requiring the sensitive data; 

presenting the user with a high trust mode of operation, wherein the high 
trust mode of operation stores sensitive data received from the user in an 
encrypted format; 

8 receiving a selection from the user indicating one of the two modes of 

5J 9 operation; and 
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^ 10 handling sensitive data associated with the user in accordance with the 

pf; 1 1 selected mode of operation. 

12 

Q 13 11- A method as recited in claim 10 further comprising presenting the 

14 user with a moderate trust mode of operation, wherein the moderate trust mode of 
operation stores sensitive data from the user in an encrypted format using a 

16 password known to the user; and wherein receiving a selection from the user 

17 includes receiving a selection indicating one of the three modes of operation. 

18 

19 12. A method as recited in claim 10 further comprising associating a 

20 user account with the selected mode of operation. 

21 

22 13. A method as recited in claim 10 further comprising assigning a 

23 default trust mode if the user does not select a valid mode of operation. 
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14. One or more computer-readable memories containing a computer 
program that is executable by a processor to perform the method recited in claim 
10. 

15. A method comprising: 

presenting a user with a moderate trust mode of operation, wherein the 

7 moderate trust mode of operation stores sensitive data from the user in an 

8 encrypted format using a password known to the user; 

9 presenting the user with a high trust mode of operation, wherein the high 
3 la trust mode of operation stores sensitive data received from the user; 
I 11 receiving a selection fix)m the user indicating one of the two modes of 

^1 12 operation; and 

13 handling sensitive data associated with the user in accordance with the 

selected mode of operation. 
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16. One or more computer-readable memories containing a computer 
17 program that is executable by a processor to perform the method recited in claim 
15. 
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17. A method comprising: 

presenting a user with a moderate trust mode of operation, wherein the 
moderate trust mode of operation stores sensitive data from the user in an 
encrypted format using a password known to the user; 

presenting the user with a low trust mode of operation, wherein the low 
trust mode of operation retrieves sensitive data from the user each time the user 
requests a service requiring the sensitive data; 

receiving a selection from the user indicating one of the two modes of 
operation; and 

10 handling sensitive data associated with the user in accordance with the 

selected mode of operation. 
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13 18. One or more computer-readable memories containing a computer 

program that is executable by a processor to perform the method recited in claim 
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19. One or more computer-readable media having stored thereon a 
computer program that, when executed by one or more processors, causes the one 
or more processors to: 

present a user with a pluraHty of modes of operation, wherein the pluraKty 
of modes of operation define different trust options for handhng sensitive data 
associated with the user; 

receive a selection from the user, wherein the selection is one of the 
plurality of modes of operation; and 

process sensitive data associated with the user in accordance with the 
selected mode of operation. 

20. One or more computer-readable media as recited in claim 19 
wherein the plurality of modes of operation include a low trust option for handling 
sensitive data associated with the user, the low trust option configured to retrieve 
sensitive data from the user each time the user requests a service requiring the 
sensitive data. 

21. One or more computer-readable media as recited in claim 20 
wherein the low trust option does not persistently store sensitive data after the 
requested service requiring the sensitive data is complete. 
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22. One or more computer-readable media as recited in claim 19 
wherein the plurality of modes of operation include a high trust option for 
handling sensitive data associated with the user, the high trust option configured to 
retrieve sensitive data from the user and store the sensitive data in an encrypted 
format. 

23. One or more computer-readable media as recited in claim 19 
wherein the plurality of modes of operation include a moderate trust option for 
handling sensitive data associated with the user, the moderate trust option 
configured to retrieve sensitive data from the user and store the sensitive data in an 
encrypted format using a password known only to the user. 
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